node-keytar has support for encryption on an unencrypted disk. Lose the password and you're locked out.